- Package
- drupal/commerce_payumoney
- Fixed in
- No fixed version yet
- Published
- Wed 28 Oct 2026, 17:18 Lisbon
In plain words
The Drupal Security Team has marked this project unsupported because it has a known security issue that the maintainer has not fixed. The advisory does not explain what an attacker could do or under which conditions.
Am I affected?
Look in composer.lock for drupal/commerce_payumoney. If it is present, the unsupported-project notice applies. The advisory gives no affected version range or configuration, feature or database conditions, so it provides no way to narrow down which installations have the security issue.
What to do
There is no fixed release yet. Read the advisory for a workaround, and watch drupal/commerce_payumoney for a new version.
The advisory's description
The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons.